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PREPARE A DATA MESSAGE ASSOCIATED WITH (1) A SOURCE ADDRESS OF THE 
SECOND DATA PROCESSING SYSTEM OR A SERVER OF THE SECOND ENTITY, AND (2) A 
DESTINATION ADDRESS OF A FIRST DATA PROCESSING SYSTEM OR A SERVER OF THE 
FIRST ENTITY. 



ANNOTATE THE DATA MESSAGE WITH A FIRST PORT IDENTIFIER ASSOCIATED WITH A 
FIRST FIREWALL AND A SECOND PORT IDENTIFIER ASSOCIATED WITH THE SECOND 
FIREWALL, WHERE THE FIRST PORT IDENTIFIER IS DISTINCT FROM THE SECOND PORT 
IDENTIFIER. 



SEND THE DATA MESSAGE AND THE ASSOCIATED FIRST PORT IDENTIFIER, SECOND 
PORT IDENTIFIER, DESTINATION ADDRESS, AND SOURCE ADDRESS FROM THE 
SECOND COMMUNICATIONS SYSTEM TO THE FIRST COMMUNICATIONS SYSTEM VIA 
THE EXTERNAL COMMUNICATIONS NETWORK. ^ 



DOES THE SENT DESTINATION ADDRESS AND THE SENT FIRST PORT IDENTIFIER 
MATCH A REFERENCE DESTINATION ADDRESS AND A REFERENCE FIRST PORT 
IDENTIFIER, RESIDENT IN THE FIRST FIREWALL? 



PASS THE DATA MESSAGE THROUGH^] 
I THE FIRST FIREWALL. \ 
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BLOCK THE DATA MESSAGE FROM 
TRAVERSING THE FIRST FIREWALL. 
ENTER DATA ON THE DATA 
MESSAGE INTO A SUSPECT 
ACTIVITY LOG. 
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<DOES THE SENT SECOND PORT IDENTIFIER MATCH A REFERENCE SECOND PORT 
IDENTIFIER^^RESIDENT IN THE SECOND FIREWALL? 
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PASS THE DATA MESSAGE THROUGH 
THE SECOND FIREWALL. 
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BLOCK THE DATA MESSAGE FRO 
TRAVERSING THE SECOND 
FIREWALL. ENTER DATA ON THE 
DATA MESSAGE INTO A SUSPECT 
ACTIVITY LOG. 




RECEIVE THE DATA AAt'^^A^e pKT THE FIRST DATA PROCESSING 

SYSTEM FOR ANY Sa^S^i-SEirACTION THAT IS NECESSARY OR APROPRIATE. 



FIG. 3 



PREPARE A DATA MESSAGE ASSOCIATED WITH (1) A SOURCE ADDRESS OF THE 
SECOND DATA PROCESSING SYSTEM OR A SERVER OF THE SECOND ENTITY, AND (2) A 
DESTINATION ADDRESS OF A FIRST DATA PROCESSING SYSTEM OR A SERVER OF THE 
FIRST ENTITY. 



ANNOTATE THE DATA MESSAGE WITH A FIRST PORT IDENTIFIER ASSOCIATED WITH A 
FIRST FIREWALL. 



SEND THE DATA MESSAGE AND THE ASSOCIATED FIRST PORT IDENTIFIER, 
DESTINATION ADDRESS, AND SOURCE ADDRESS FROM THE SECOND 
COMMUNICATIONS SYSTEM TO THE FIRST COMMUNICATIONS SYSTEM VIA THE 
EXTERNAL COMMUNICATIONS NETWORK. 



DOES THE SENT DESTINATION ADDRESS AND THE SENT FIRST PORT IDENTIFIER 
MATCH A REFERENCE DESTINATION ADDRESS AND A REFERENCE FIRST PORT 
IDENTIFIER, RESIDENT IN THE FIRST FIREWALL? 
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PASS THE DATA MESSAGE THROUGH 
THE FIRST FIREWALL. 
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BLOCK THE DATA MESSAGE FROM 
TRAVERSING THE FIRST FIREWALL 
ENTER DATA ON THE DATA 
MESSAGE INTO A SUSPECT 
ACTIVITY LOG. 



DOES THE SENT SOURCE ADDRESS MATCH A REFERENCE SOURCE ADDRESS, 
RESIDENT IN THE SECOND FIREWALL? 
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PASS THE DATA MESSAGE THROUGH 
THE SECOND FIREWALL 
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BLOCK THE DATA MESSAGE FROM 
TRAVERSING THE SECOND 
FIREWALL. ENTER DATA ON THE 
DATA MESSAGE INTO A SUSPECT 
ACTIVITY LOG. 



RECEIVE THE DATA ME55A^H AT - THE FIRST DATA PROCESSING 

SYSTEM FOR ANY SUBSEQUENT ACTION THAT IS NECESSARY OR APROPRIATE. 
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